Re:Cingular and Nokia E62

kb102374  2007/02/03 00:32 UTC


I was able to get my E62 to prompt me about network prompts by selecting no to 'Allow network access ... ' prompt after opening WidSets, then choosing the options/client/settings menu from within WidSets. Select HTTP instead of Socket. Then choose options/client/go online. It then prompted me about the network access, so I chose Email Settings as my connection type ;-) Probably not the best solution, but it does connect. This will not eliminate the 150 network prompts, unfortunately, but it's a start until I can find a better solution.

Re:Cingular and Nokia E62

ilium  2007/02/15 15:35 UTC

Antti wrote: ... To overcome this problem in common, we would need to sign our application with a certain variety of certificates that would suit the needs of these specific carriers. This approach hasn't been taken by us due to various reasons, execution speed and complexity amonst many. Since WidSets runs on a wide variety of Java-enabled phones, a phone manufacturer-specific certificate (signing) does not solve the problem either. Instead, a separate signing process for every single operator in the world would have to be done, requiring a long and tiresome process, ending in many separate WidSets clients, which would then need to be distributed to the correct phone/operator combination (i.e. users). In addition, in some cases and phones, a signed application might not install at all, actually hindering the usage of WidSets. ...

According to the MIDP 2.0 specs, "The trusted third party domain will encompass well-known Certificate Authorities’ (CA) root certificates."

Most (all?) MIDP 2.0 phones honor this.
Different carriers may choose to trust different CA's for this.
Cingular phones (including the E62) honor these CA's:
Verisign
Thawte
Javaverified.com

The E62 also honors "Nokia Content Signing CA", though I doubt other (ie, Sony Ericssen) Cingular phones do.

Bottom line: If you get WidSets signed with a cert issued by Thawte or Verisign, MIDP 2.0 phones from ALL carriers *should* honor it.

According to the MIDP 2.0 spec, an app signed with an unknown cert *should* be treated the same as an unsigned app. In the real world, though, as you say, some phones might refuse to install the signed app.

So you really only need to offer TWO downloads. One unsigned, and one signed. You don't need a different one for each carrier.

Regarding my earlier comment about delegating trust to individual Widgets, I've changed my mind.
When I accept the WidSets app, I am trusting that it will not allow individual widgets to do anything harmful.
PLEASE make sure that's the case (esp. since you haven't released that SDK) !

Regards,
Troy

Re:Cingular and Nokia E62

wtaylor70  2007/03/08 22:45 UTC


I believe I found the problem. It has nothing to do with certificates.
I found that the default access point (MEdia Net) has a proxy configured.

Here's what I did...

1. I chose Settings > Config
2. Under Config I chose Access Points
3. I highlighted MEdia Net
4. I chose Options > Edit
5. Under the MEdia Net Access Point Page I Chose Options > Advanced Config.
6. I then deleted the information under Proxy Serv. Address

NOTE: Write this information down incase you need it again or make a copy of the access point

7. Then I deleted the proxy port number.
8. I then hit the back key and went to Authentication and chose normal.

I then relaunched the Widsets program. It started to pull down the WidSets and load them. However, I still get the message "Allow application WidSets to use network and send or receive data?" Just keep selecting "Yes" until everything loads and then choose "No" to go offline when it finishes.

WT

Re:Cingular and Nokia E62

Antti  2007/03/14 11:36 UTC


Hi wtaylor70,

I tried what you suggested on a E62 here. It seems that removing the proxy works to some extent, but it still leaves the user with the annoying constant query on whether or not the client can actually connect to the network.

Signing the application would remove this query from the end user and thus better the performance and usability a lot. Most of the clients functionality has to do with the way it's connected to the WidSets server, so I would call the current usability quite poor.

Hopefully we get our signed client online soon to better the usability with this combination.

Cheers,
Antti

Re:Cingular and Nokia E62

jonasrisen  2007/04/01 03:41 UTC


Hi everyone.

I have been racking my brain trying to figure out a way to work around the "always allow" network access prompt. The only thing I can figure out is exactly what has been stated already in this forum. That until the third party app writers get certificates from the right people then the application is basically useless... I consider it totally useless if i have to constantly say yes to "allow widsets to access network"... I can only hope that because this is a new Cingular standard for all new phones... (so far I have read the same issue for nokia e62 and new moto phones) ... that all the third party app makers will just get their java apps certified so we can use them... If anyone has a good workaround for an E62 please let me know. Cheers, Jonas

Re:Cingular and Nokia E62

Antti  2007/04/02 13:27 UTC


Hi all!

I'm glad to announce that we finally got our first signed test clients up and running. Here's the link for the jad-file, http://www.widsets.com/downloads/nokiasigned_widsets.jad. You can install the client by accessing this URL with your mobile browser.

If you get this working and it seems to have fixed things for you, we would really appreciate the comments. This is the Nokia specific signing, so other Nokia phones will also support it, and might remove similar issues with other models also.

Additional notes:
You can install it on top of a unsigned client. Unsigned client cannot unfortunately be installed on top of this one for security reasons. So if you for some reason want to install the unsigned version again, please remove this version from underneath.

Best Regards,
Antti

Re:Cingular and Nokia E62

Aware  2007/04/03 18:42 UTC


Hurray! For the first time I have been able to launch Widsets!!!

I had to set the conection to Socket instead of HTTP ... when set to HTTP it seems like Widsets constantly connected/disconnected over and over ...

As I type, Widsets seems to be downloading all the wigets I set up months ago when first trying to get it to work. I see progress bars in each of several wiget windows.

Ah - one or two have now completed and are now showing the correct image instead of just a progress bar. Nice feature.

Time to have a play and see if it is really as good as it looks :-)

Thanks again!!!

By the way, what was I supposed to do with this file ... http://www.widsets.com/downloads/nokiasigned_widsets.jad ? It seems that when I downloaded and installed the latest client it was already signed, so I didn't do anything with the license file.

Re:Cingular and Nokia E62

Antti  2007/04/05 08:26 UTC


Hummmm...

As far as I know, our general client is still not signed? Could of course be that I'm wrong, but it might also be that Cingular has changed something on their side to make socket connections work at this point, even for the unsigned applications. Anyway, the JAD-file that I linked you guys is the Nokia signed client that will should not ask for connectivity all the time. We will of course change it so in the near future that the signed client will be the default for all of the phones that support it.

In the end, I'm really glad to hear that you and also other people in our forum got the application working, please do share your thoughts if you have any. :)

Cheers,
Antti

Re:Cingular and Nokia E62

ilium  2007/05/11 15:54 UTC

Antti wrote: I'm glad to announce that we finally got our first signed test clients up and running. Here's the link for the jad-file, http://www.widsets.com/downloads/nokiasigned_widsets.jad. You can install the client by accessing this URL with your mobile browser.

I've been using the signed client for a while now, and I'm thrilled.
Now that it's known to work, do you think you could wrap it with a downloader script on http://get.widsets.com so that the .jad file associates the Midlet with the logged-on user (like the regular download does)?

When I first installed the signed version, I thought I'd just go ahead and start life over with a new Widsets account. I'm glad I didn't, because I just updated to 0.99, and I would have had to do it all over again.

I haven't experimented with merging some of the entries from the "customized" .jad file into the signed .jad file, since I didn't know if it would work. If there are manual edits I can do to the .jad file (with both the anonymous signed and customized non-signed .jad files in front of me), please let me know!

Thanks,
Troy

Re:Cingular and Nokia E62

Antti  2007/05/18 12:11 UTC


Hi ilium.

Our general client is now delivered as the Nokia signed application for even the registered users. So it works if you just download the application either by ordering the SMS from the site or by doing it via http://get.widsets.com/. So you shouldn't really have to edit the JAD-files by hand any more.

You can currently also convert the nokiasigned_widsets.jad to be the application that points to your own account by first getting your account specific JAD-file and copy pasting the key and queue lines from there to the signed JAd. This should however no longer be necessary, as I already mentioned.

Please drop us a note if there's anything wrong with the application download.

Regards,
Antti